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(54) Title: ELECTRONIC COMBINATION LOCK 
(57) Abstract 

A user of a self-powered electronic combination lock rotates an outer dial (101) to cause 
generators to generate energy for storage in a capacitor bank. The user then rotates an inner dial 
(102) to cause a microprocessor to sequentially display combination of numbers, and presses inner 
dial (102) to select a displayed number. A microcontroller determines direction and extent of 
motion of the inner dial by receiving signals derived from Wiegand sensors placed in proximity to 
a magnetized disc which rotates integrally with the inner dial, and controls the display of numerals 
on an LCD display accordingly. When the microcontroller determines that a correct combination 
has been entered, it activates a motor (201) which moves a motor cam (205) to act directly on a 
locking lever (213) so that the locking lever can engage a drive cam (218) integrally linked with 
the inner dial, to allow the inner dial to withdraw the lock's bolt. 
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ELECTRONIC COMBINATION LOCK 

DESCRIPTION 

Technical Field 

The invention relates to the electronic combination locks. More specifically, the 
invention relates to electronic combination locks in which an assembly of mechanical 
elements and computer-implemented processes provide a wide range of features. 

Background Art 

Various lock designs are known in the art Conventionally, locks have been purely 
mechanical in design. However, with the development of reliable integrated circuits and 
microprocessors, more sophisticated and functional lock devices have become possible. 
However, even historically sophisticated electronic lock designs have failed to provide a 
number of desirable features. 

Desirable features include the ability to be self-powered, so that correct operation 
of the lock is not prevented during power failures or battery failures. Whereas certain self- 
powered locks are known in the art, their designs suffer from the possibility that the self- 
charging function can interfere with the combination entry function. 

Also, it is desirable that locks be tamper-evident and resistant to physical attack. 
Also, it is desirable to reduce the number of components in a lock, so as to enhance 
simplicity and promote reliability. Known locks have not adequately reduced the number 
of components, such as in the components used for bearing and retaining a combination 
dial, or in a mechanism used to act directly on the linkage to the bolt. Typically, known 
locks have involved gears which are unnecessarily complex and prone to failure. 
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It is also desirable to avoid a situation in which a user enters a correct combination, 
and thus enables the bolt to be withdrawn, but for some reason leaves the lock unattended 
so that some other unauthorized individual may open the lock. It is desirable to prevent 
an unauthorized person from opening the lock after the authorized person, who entered a 
5 correct combination, has departed. 

Along a similar line, especially pertinent to self-powered locks which have a limited 
power storage capacity, it is desirable to ensure that there is sufficient energy to prevent 
any person from opening the lock if there is not enough power to operate the lock 
correctly. However, conventional locks have overlooked these features. 

10 It is especially desirable in self-powered locks to use components which consume 

a minimum amount of power. Among the components of conventional locks which 
unnecessarily consume power are the sensors which sense motion and rotation of the 
combination dial. Conventional lock designs have overlooked a feature of reducing 
unnecessary power consumption in this area. 

15 It is also desirable to provide a combination lock in which, after a person has 

entered a given number of combinations which are incorrect, it is made even more difficult 
for the user to open a lock. This feature is based on the premise that an unauthorized 
individual (or a rapid dialling machine) attempting to open the lock without knowing the 
correct combination will first enter several combinations incorrectly. However, 

2 0 conventional lock designs have not implemented this desirable feature that, based on an 
apparent attempt by an unauthorized user to open the lock, it should be made even more 
difficult for the user to open the lock. 

Thus, conventional lock designers have overlooked many features, and combinations 
of features, which would provide a versatile, convenient, tamper-evident, reliable, power- 
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efficient, electronic combination lock. It is to meet these demands that the present 
invention is directed. 

DISCLOSURE OF INVENTION 

The present invention provides a variety of features which overcome limitations of 
known locks, including electronic combination locks. 

According to a first aspect of the invention, a dual dial arrangement is provided, 
including a first dial which is turned to generate power, and a second dial which rotates to 
generate numbers to represent the dial position. As an additional feature, the second dial 
can be pushed to input a selected displayed number as a combination entry. 

Thus, the invention provides an arrangement of controls on a combination lock, the 
arrangement comprising means for recognizing a combination and for allowing opening of 
the lock, when power is provided, means for storing and providing power to the 
recognizing means, a first control structure, accessible from outside the lock, which is 
movable by a user to provide power to the storing means, and a second control structure, 
accessible from outside the lock, which is movable by the user separately from the first 
control structure to determine the combination. 

According to a second aspect of the invention, means are provided for retaining the 
first and second dials, which function both as bearings for the dials, and as retaining 
members for the dials, so that the combination lock is tamper-resistant and tamper-evident. 

Thus, the invention provides an arrangement for bearing and retaining at least one 
externally accessible rotatable dial on a combination lock. The arrangement comprises a 
support structure, the rotatable dial, and an integral bearing/retaining member, affixed to 
a first one of the support structure or dial, the member including a clip which matingly 
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engages a slot in a second of the support structure or dial so that the clip cannot be 
removed from its mating engagement with the slot without causing visible damage. 

According to a third aspect of the present invention, a motorized cam directly acts 
on a locking lever, so that the lock bolt is mechanically drawn by the lock dial. 

Thus, the invention also provides an arrangement within a lock, comprising a 
motor, a motor cam which is directly responsive to turning of the motor, a bolt which is 
extendable out of and withdrawable into the lock, and a locking lever which is operatively 
connected to the bolt and which is directly contacted by the motor cam and directly 
responsive to the motor cam so as to be moved into and out of an "engage" position in 
which the bolt may be extended or withdrawn from the lock. 

According to a fourth aspect of the present invention, a timeout period is provided 
after a correct combination has been entered. If the bolt has not been withdrawn during 
the timeout period, the invention prevents it from being withdrawn, until a correct 
combination has again been entered. 

Thus, the invention further provides an arrangement within a lock, comprising a bolt 
capable of being extended from or withdrawn into the lock, means for entering an input 
combination, and a controller. The controller includes means for comparing the input 
combination with at least one correct combination and for determining a match 
therebetween, means for forming a time window after the match is determined, and means 
for enabling the bolt to be withdrawn only during the time window. 

A fifth aspect of the invention provides a scheme of monitoring power supply 
voltages within the lock. For example, if insufficient power is available to operate the 
lock, the monitoring feature prevents the lock from attempting to operate at all. Preferably, 
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this monitoring is performed in a flexible maimer using a programmed microcontroller such 
as one including a microprocessor CPU. 

Thus, the invention also provides a self-powered lock comprising a bolt capable of 
being extended from and withdrawn into the lock, and means, responsive to entry of a 
5 correct combination, for enabling the bolt to be withdrawn into the lock. The , the 
enabling means has an "engage" position in which the bolt can be withdrawn into the lock 
and a "disengage 11 position in which the bolt cannot be withdrawn into the lock. The lock 
also has means for storing energy for operation of certain components the lock, means for 
monitoring an energy level of the storing means, and means, responsive to the monitoring 

10 means, for preventing the enabling means from moving from its "disengage" position to its 
"engage" position if the monitored energy level is below a given energy threshold. The 
given energy threshold is greater than or equal to an amount of energy required to 
subsequently move the enabling means from its "engage" position to a "disengage" position 
after a predetermined time period. 

15 According to a sixth aspect of the present invention passive magnetic sensors are 

used to sense movement of a dial, and, in combination with other circuitry, determine the 
direction of dial movement. 

Thus, the invention further provides a self-powered lock comprising a movable dial, 
accessible from outside the lock for a user to select an input combination, means for 

20 generating and storing energy, a magnetized element, moving in response to the dial's 
movement, a Wiegand sensor placed with respect to the magnetized element for generating 
signals indicative of movement of the magnetized element, and a controller, powered by 
the energy from the storing means, for interpreting the signals from the Wiegand sensor 
and for controlling operation of the lock. 
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According to a seventh aspect of the present invention, after a given number of 
successively-entered, incorrect combinations have been made, a "lockout state" is entered 
in which the lock is prevented from opening, even if a correct combination is entered. An 
"override" combination is provided to end the lockout state. 
5 Thus, the invention provides a combination lock capable of operating in (1) a 

normal mode in which at least one first combination allows the lock to be opened and (2) a 
lockout mode in which at least one second combination allows the lock to be opened, 
wherein the at least one first combination differs from the at least one second combination. 
The lock comprises means for receiving an input combination, means for comparing the 

10 input combination with the at least one first combination, means for counting a number of 
successively-entered incorrect input combinations which do not match a valid first 
combination, and means, responsive to the counting means when the counting means 
determines that a given threshold number of successively entered incorrect combinations 
have been encountered, for changing the operational mode of the lock into the override 

15 mode. 

According to still another aspect of the present invention, power storage for DC 
operation of various components of a lock are separated, so that available power for a 
given function may be monitored, and selected monitored power depletion may thus govern 
operation of the lock. 

20 According to still another aspect of the invention, data is sent serially from a 

processor to a combination number display, to minimize the number of pathways passing 
through the door of the security container. 
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According to a further aspect of the invention, switches which detect bolt position 
and the position of the dial which is pushed to choose combination numbers, are provided 
with pivot posts and overtravel springs, to minimize damage to the switch case. 

Other objects, features, and advantages of the invention will be apparent to those 
5 skilled in the art, upon reading the following Best Modes for Carrying out the Invention 
in conjunction with the accompanying drawing figures. 



BRIEF DESCRIPTION OF DRAWINGS 
10 The invention is better understood by reading the following Best Mode(s) for 

Carrying out the Invention with reference to the accompanying drawing figures, in which 

like reference numerals refer to like elements throughout, and in which: 

FIG. 1 is an exploded perspective view of a dial assembly according to a preferred 

embodiment of the present invention, 
15 FIG. 2 is an exploded perspective view of a lock mechanism according to a 

preferred embodiment 

FIG. 3A is a circuit diagram illustrating preferred embodiments of circuitry for 

producing power levels, power sensing levels, and other signals used in an embodiment of 

the electronic combination lock. 
2 0 FIG. 3B schematically illustrates a central processing unit (CPU) receiving rotational 

information from a rotating dial and other information regarding power levels, and 

controlling a display and motor cam, thus electronically governing operation of an 

embodiment of the electronic combination lock. 

FIG. 4 illustrates a preferred drive cam 218 (FIG. 2), showing details thereof. 
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FIG. 5 is an enlarged view of the locking lever 213 (FIG. 2), with FIGS. 5A and 
5B showing relative orientation of the motor cam 205 in relation thereto in the engage and 
disengage (lock) position. 

FIG. 6 is a flow chart illustrating single user operation of the preferred electronic 
5 combination lock. 

FIG. 7 is a flow chart supplementing the flow chart of FIG. 6, illustrating the 
"lockout" state entered when a user has entered a given number of incorrect combinations. 

FIG. 8 schematically illustrates various elements from FIG. 1, not necessarily to the 
same scale, to demonstrate the tamper-evident features of the present invention. 

10 

BEST MODE(S) FOR CARRYING OUT THE INVENTION 

In describing preferred embodiments of the present invention illustrated in the 
drawings, specific terminology is employed for the sake of clarity. However, the invention 
is not intended to be limited to the specific terminology so selected, and it is to be 

15 understood that each specific element includes all technical equivalents which operate in 
a similar manner to accomplish a similar purpose. For example, the terms "upper", 
"lower", "above", "below", "clockwise", "counter-clockwise", and the like, are used for 
purposes of explaining a preferred embodiment illustrated in the accompanying drawings, 
but should not be interpreted as limiting the claims which follow this specification. 

20 FIG. 1 illustrates in exploded perspective view a preferred dial assembly according 

to the present invention. 

A dial ring 107 houses and supports the elements of the dial assembly. An outer 
dial 101 is positioned concentrically atop the dial ring, and is supported on it by three 
bearings, illustrated as elements 105A, 105B, and 105C. The bearings, collectively referred 
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to herein as element 105, fit in an annular slot (not visible in FIG. 1) in the bottom side 
of outer dial 101. The bearings 105 are provided with retaining clips, which may be leaf 
springs, one of which is visible in FIG. 1, as element 155 A. Bearings 105 are first retained 
in the dial ring 107, and outer dial 101 snaps into place. As the outer dial snaps into place, 
5 the bearings fit in the annular slot in the bottom of the outer dial, snapping in place through 
the action of retaining clips 155 A. FIG. 8 illustrates the details of this arrangement in 
greater detail. 

Thus, after the outer dial is snapped in place, the lock mechanism is less susceptible 
to physical attack, as the dial is retained by its bearings. Should an individual forcibly 

10 remove the dial after it is mounted on the bearings, the bearings and dial would be visibly 
damaged, leaving evidence of the attempted entry or vandalism. 

The invention also provides one or more generators 104A, 104B, which are secured 
to the dial ring 107. The generators 104A, 104B are provided with respective rotary gear 
members 154A, 154B. Teeth on the periphery of gear members 154A, 154B interlock with 

15 an annular gear (not shown) on the bottom side of outer dial 101. 

In operation, as outer dial 101 is turned, the teeth on its annular gear turn the gear 
members 154A, 154B so as to cause respective generators 104 A, 104B to generate 
alternating current (AC) electricity. As will be described in greater detail below, the 
generators provide electricity to a bank of energy storage devices for providing power to 

2 0 those components of the electronic lock which require electric power to function. These 
components include, for example, a central processing unit (hereinafter "CPU"), liquid 
crystal display (hereinafter "LCD"), and associated circuitry, to be described with reference 
to FIGS. 3A and 3B. 
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The dial assembly is also provided with an inner dial 102. During assembly, a dial 
bearing 106 is fixed to the dial ring 107. As the inner dial 102 is snapped into place, the 
dial bearing 106 snaps into an annular slot (not visible) on the underside of the inner dial. 
A spring 103, which may be a cylindrical compression spring, urges inner dial 102 away 
5 from the dial ring. 

In the same manner as bearings 105 retain outer dial 101 as described above, dial 
bearing 106 retains inner dial 102 in position in the dial assembly. As the dial bearing 106 
is preferably made of a molded material, such as DELRIN™, the arrangement of the 
bearing and inner dial is tamper-evident, should an individual attempt to forcibly remove 
10 the inner dial or vandalize that portion of the apparatus. The details of this arrangement 
are illustrated in FIG. 8, discussed below. 

After assembly, inner dial 102 is arranged concentrically with outer dial 101, and 
both are positioned rotably atop the dial ring 107. 

In operation, dials 101, 102 may be freely rotated on their respective bearings. As 
15 will be described in greater detail below, the outer dial is rotated to generate alternating 
current electrical power which is later rectified to charge banks of capacitors. The 
capacitors store power to operate the electronic circuitry, and rotate a cam to allow 
unlocking and re-locking of the lock assembly. The inner dial, on the other hand, is rotated, 
so as to cause the CPU to make the LCD display a number, and is pushed in by the user 
2 0 against the force of spring 103 so as to select a particular number which is displayed; the 
inner dial is also used to mechanically retract the lock's bolt. 

In FIG. 1, the LCD display is placed behind a window 108, and a printed circuit 
board is located at a position 110. Suitable interfaces are provided between the elements 
rotating with the inner dial, the printed circuit boards, the LCD display, and between the 
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outer dial and the capacitor bank. The physical and electrical interconnection of elements 
is not central to the invention, and may readily be implemented by those skilled in the art, 
so that further discussion thereof is omitted. 

Referring now to FIG. 2, an exploded perspective view of a preferred lock 
mechanism is illustrated. A lock case 214 supports, houses and protects elements of the 
lock mechanism. 

A drive cam 218 is integrally linked with inner dial 102 (FIG. 1), such as via a 
hexagonal rod 109 (shown in 1). Thus, in a typical embodiment, the underside of dial ring 
107 (FIG. 1) is physically opposed to the underside of case 214 (FIG. 2), so that a direct 
linkage of the dial assembly to the lock mechanism is provided. FIGS. 1 and 2 are 
provided in exploded perspective views merely for purposes of explanation, and it is 
understood that FIGS. 1 and 2 should be rotated 90 degrees in mutually opposite directions 
to appreciated their orientation when assembled. 

Again referring to FIG. 2, drive cam 218 is rotatably positioned atop a bushing 219. 
A spring 220 and cam spring retaining bushing 221 are disposed directly above drive cam 
218. Cam spring retaining bushing 221 is held in place by a bracket 223 which is mounted 
directly above the drive cam. The cam spring 220 is captured between the drive cam 218 
and the cam spring retaining bushing 221. The mounting position of the bracket 223 in the 
lock case 214 causes the cam spring to be compressed and hold the drive cam against the 
hard plate bushing 219. 

Drive cam 218 rotates integrally with the inner dial 102 (FIG. 1) by means of the 
hexagonal spindle 109 disposed along their common rotational axis. In conjunction, the 
methods embodied in the CPU (described below), and the turning of the drive cam by the 
inner dial, substantially govern operation of the lock mechanism. 
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A bolt 215 extends from a slot 214S in case 214 when in the "lock" position, but 
is withdrawn into the case 214 in its "unlock" position. Bolt 215 is provided with a detente 
ball 216 and a detente spring 217, providing upward urging on the bolt In the locked 
position, this upward urging works in conjunction with the angle of an edge of an angled 
5 countersink (not visible) on the bottom of the bolt, to translate the upward force into a 
longitudinal force in the direction of bolt motion. This force on the angled countersink 
holds the bolt against its stop in its fully extended position. 

The position of bolt 215 is substantially governed by the longitudinal position and 
angular orientation of a locking lever 213. The locking lever rotates about an axis of 
10 rotation defined by a hole 213H. A lever screw 224 fits through the hole 213H into a 
threaded hole in bolt 215 near the left end thereof. The lever screw 224 ensures that lever 
213 and bolt 215 move together, longitudinally. 

Locking lever 213 is urged in a counter-clockwise direction (as viewed in FIG. 2) 
by a lever spring 212, which urges a straight key portion 213K of lever 213 toward drive 
15 cam 218. Although not visible in FIG. 2, a slot 218SL (shown in FIG. 4) is provided in 
drive cam 218 which can engage key 213K when drive cam 218 is in the proper position, 
as described below. 

Locking lever 213 has a slot 213SL which receives a first end of sliding link 21 L 
At the end of sliding link 211 opposite slot 213SL protrudes a small key 21 IK, which key 
2 0 may engage a tab 21 8T on drive cam 218, shown in FIG 4. Further, a compression spring 
225 engages the sliding link 211 to hold it in a "rest" position away from motor cam 205. 

Mating brackets 204, 223 support and position various other elements in the lock 
mechanism. 
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A magnet rotor 202 is provided with an axis which is parallel to the axis of drive 
cam 218. A magnet rotor post 209 is positioned along the axis of magnet rotor 202, and 
has at its lower end a gear teeth arrangement which mates with gear teeth 218G positioned 
on top of drive cam 218. The magnet rotor post 209 penetrates a hole in bracket 223 in 
5 which it can rotate. 

First and second sensor switches 203A, 203B are provided. 

First sensor switch 203A is provided at a position 223A on mating bracket 223. 
Switch 203A senses when the inner dial 102 has been pushed. More specifically, switch 
203 A directly senses the upward motion (as viewed in FIG. 2) of drive cam 218, which is 
10 integrally connected with the inner dial 102. Switch 203A provides a signal to a CPU 
indicating pressing of the inner dial, as described with reference to FIG. 3B. 

Similarly, second sensor switch 203B is provided at a position 204B on bracket 204. 
Sensor switch 203B senses when the bolt 215 is withdrawn into the case in its unlock 
position. Switch 203B also provides a signal to the CPU as described with reference to 
15 FIG. 3B. 

Switches 203A and 203B are retained to respective brackets 223 and 204 by a pivot 
post and a switch spring (not shown for purposes of clarity). Each pivot post fits in the 
right hole (as viewed in FIG. 2) of the two small holes in the respective brackets 204, 223. 
A switch spring, which is preferably in the form of a "U", fits in the left hole (as view in 
20 FIG. 2) of the two holes. The switch springs holds the pivot posts in place and urges the 
switches back to their original position after the overtravel condition is relieved. This 
mounting arrangement allows the switches to pivot about pivot post when the switch 
reaches its maximum limit of travel. In this manner, it prevents breakage of the switches. 
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A bolt motor 201 is provided with an axle which penetrates mating bracket 204. 
Extending from the bolt motor axle is a motor cam 205. Under control of the CPU 
(FIG. 3B), the bolt motor causes motor cam 205 to engage or disengage locking lever 213 
within a cove 213C of the locking lever 213. The cam is positioned in the cove, beyond 
5 the end of the sliding link 211. 

As the largest portion of motor cam 205 is rotated upward and to the right (as 
viewed in FIG. 2), it causes the locking lever 213 to rotate clockwise (as viewed in FIGS. 2 
and 5B) into its disengaged (lock) position, away from drive cam 218. Conversely, as 
motor cam 205 rotates away from this position to its "engage" position (see FIG. 5A), the 
10 locking lever 213 is allowed to rotate toward drive cam 218 under the urging of lever 
spring 212 (FIG. 2). 

Also illustrated in FIG. 2, for the sake of completeness, is a re-locker 207, which 
is rotatably affixed to mating bracket 204 by a re-lock rivet 208. The re-locker element 
207 is urged in a clockwise direction (as viewed in FIG. 2) by a re-lock spring 206. The 
15 re-locker element 207 acts substantially independently of most other elements in FIG. 2. 

In the event that an individual physically forces an object into the lock mechanism, 
the cover (not shown) of case 214 deforms, causing the re-locker to rotate clockwise 
(as viewed in FIG. 2). When the re-locker rotates clockwise, a nose portion 207N of the 
re-locker is inserted into a cove 215C in bolt 215, and into a slot (not visible) inside case 
2 0 214, When nose 207N is rotated into the slot within case 214, the bolt 215 cannot be 
withdrawn into the case because the nose within cove 215C blocks retraction of the bolt 
FIGS. 3A and 3B (which may collectively be referred to herein as FIG. 3) show 
various elements schematically. These elements show the manner in which the various 
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physical elements of FIGS. 1 and 2 are connected by electronic elements, and function as 
in the flow charts in FIGS, 6 and 7 (described below). 

Referring to FIG. 3A, circuitry for converting generated electricity into DC power 
for operation of the lock, is illustrated. Generators 104A, 104B (FIG. 1) are illustrated in 
5 FIG. 3A connected to respective pairs of full wave rectifiers ("FWRs") 304A, 304B and 
304C, 304D. The negative terminals of FWRs 304A and 304B are grounded, while the 
positive terminals are wired together to effectively form a summing junction 305A. The 
sum from junction 305A feeds the negative terminals of FWRs 340C and 304D. The 
positive terminals of FWRs 304C and 304D are wired together to effectively form a 
10 summing junction 305B. 

A fuse 306 is located on a path between the summing junction 305B and a node 
308. Node 308 has a voltage V_RECT, which is a rectified DC voltage resulting from the 
full wave rectified outputs of the generators. V_RECT is not a regulated voltage. 

Node 308 is connected to nodes 310, 320, 330, and 340 by respective diodes D311, 
15 D321, D331, D341. The diodes D311, D321, D331, D341 ensure current cannot pass from 
any one of nodes 310, 320, 330, 340 to any other of these nodes. 

A Zener diode D312 leads from ground to node 310, and ensures that the voltage 
on any of nodes 310, 320, 330 or 340 does not exceed a given set amount, chosen in 
accordance with the tolerances of the electronic components or capacitors. In a preferred 
20 embodiment, diode D3 12 is 16 volt Zener diode. 

A capacitor, or, preferably, capacitor bank, C322 is provided between ground and 
node 320. In parallel with C322 is a voltage divider including resistors R324 and R325. 
The intermediate node between R324 and R325 is labeled BOLT_VDD, and is an analog 
voltage which is monitored in a manner described below. Node 320 has a voltage 
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VJLOCK, which is supplied to power motor 201 (FIGS. 2, 3B) to move motor cam 205 
(FIG. 2) as described below. 

Node 330 is separated from ground by a capacitor, or, preferably, capacitor bank, 
C332. In parallel with C332 is a voltage divider including resistors R334 and R335. Node 
5 330 has a voltage VJJNLOCK which also provides power to the motor 201 (FIGS. 2, 3B) 
to move the motor cam 205 in the opposite direction as when voltage VJLOCK powers the 
motor. The intermediate node between R334 and R335 is labeled UNBOLTJVDD, and is 
an analog voltage which is monitored in a manner described below. 

Node 340, with voltage labeled V_DCSUPP, is connected to ground via a capacitor, 
10 or, preferably, capacitor bank, C342. In parallel with C342 is a voltage divider including 
resistors R344 and R345. The intermediate node between R344 and R345 is labeled 
CMPNT_VDD, an analog voltage which is monitored in a manner to be described below. 

Various elements derive power from VJDCSUPP on node 340. For example, a 
voltage underdetector 350, a voltage overdetector 353, and a voltage regulator 356 derive 
15 power from node 340. The powering of these elements is not explicitly shown in FIG. 3 A, 
for purposes of clarity. 

Voltage regulator 356 provides VDD from VJDCSUPP, which governs operation 
of the electronic component shown in FIG. 3B such as the flip-flops, CPU, display 
elements, and shift register. 
2 0 Voltage underdetector 350 is shown schematically, with its input connected to an 

intermediate node of a voltage divider having resistors R351 and R352. R351 and R352 
connect node 340 to ground. When undervoltage detector 350 determines that the voltage 
on node 340 has fallen below a certain level, its output leading to the shutdown input of 
voltage regulator 356 is activated. In this manner, when the voltage on node 340 falls 
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below a certain critical level required for proper operation of the electronics, regulator 356 
is deactivated and VDD=0. 

An R-C combination in a low-pass filter configuration connects VDD to ground. 
The node between resistor R357 and capacitor C358 is a RESET_CPU signal which 
5 remains low for a given time after VDD is initially powered up. The RESETJZPU signal 
is used to reset a central processing unit (CPU) 380 (FIG. 3B). In a preferred embodiment, 
this reset pulse lasts approximately 20 milliseconds, to initialize the CPU. 

The input to voltage overdetector 353 is connected to an intermediate node of a 
voltage divider including resistors R354 and R355. When the voltage at node 340 is 
10 determined as being above a certain threshold deemed necessary for proper operation of 
the electronic components, the output of voltage over detector 353 is activated. This digital 
output, labeled V_SENSE, is provided to the CPU 380 (FIG. 3B). 

Thus, circuitry on FIG. 3A provides various types of signals for use by the other 
electronic components on FIG. 3B. V^LOCK and VJJNLOCK, as well as VDD, provide 
15 power to appropriate components. VOLTJVDD, UNBOLT.VDD and CMPNTJVDD are 
analog voltages which are measured at startup to ensure that adequate power is available 
for a complete operational scenario. V_SENSE is a digital signal providing a binary 
indication of the sufficiency of the voltage VDD to the electronic components. Finally, the 
RESET.CPU signal is a short signal which initially resets the CPU when the electronic 
20 circuitry is initially powered up by the generators. 

Referring now to FIG. 3B, various other elements related to operation of the 
combination lock are illustrated. 

Magnet rotor 202 is illustrated schematically. In an exemplary embodiment, magnet 
rotor 202 has three pairs of north-south poles arranged in an alternating pattern about the 
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rotor. Two Wiegand sensors 370A, 370B are arranged at a 90° offset to each other, with 
respect to the axis of rotation of the magnet rotor. 

The nature and operation of Wiegand elements is described in literature available 
to those skilled in the art, for example, "The Wiegand Effect, What's It All About?" from 
5 Sensor Engineering Company, an Echlin Company, 21555 State Street, Hamden, 
Connecticut, 36517, which is incorporated herein by reference. The document describes 
principles of operation and a particular commercially available Wiegand sensor (part no* 
110-00057-000). 

Essentially, as magnet rotor 202 rotates with the user's turning of the inner dial 102, 
10 each sensor generates pairs of alternate-polarity, short-duration predictable voltage pulses 
whose magnitude and duration are substantially independent of the speed of rotation of the 
magnet rotor. In this manner, operation of the inner dial is made more predictable than 
purely inductive sensing, while retaining the advantage that no power needs to be provided 
to generate the pairs of pulses at the output of sensors 370A, 370B. 
15 A first pulse shaping element 371 A responds to the opposite-polarity pairs of pulses 

from the Wiegand element 370A, and provides an interrupt request signal IRQ to CPU 380. 
In the illustrated embodiment, foe falling edge of the IRQ signal interrupts the CPU. Thus, 
as magnet rotor 202 turns, sensor 370A produces pulse pairs which element 371 A converts 
into a wider digital pulse whose falling edge causes an interrupt As the magnetic poles 
2 0 on magnet rotor 202 pass sensor 370A, the CPU 380 is interrupted, so that the CPU can 
then cause a new number to be displayed to the user. 

Wiegand sensor 370B provides pairs of pulses to a second pulse shaping element 
371B. In response, element 371B provides digital pulse pairs to the "set" and "reset" ("S" 
and "R") inputs of an S-R flip-flop 372. 
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The output of S-R flip-flop 372 is provided to the data input of a D-type flip-flop 
375. The clock input of D-type flip-flop 375 is triggered by the rising edge of the IRQ 
signal from element 371 A. The clocked output of flip-flop 375 is a direction-indicating 
signal DRXN which is provided to the CPU 380. 
5 In operation, the signals entering S-R flip-flop 372 are either a set pulse 

immediately followed by a reset pulse, or a reset immediately followed a set pulse. The 
order of the pulse pairs is determined by the direction of rotation of magnet rotor 202. As 
a result, the output of S-R flip flop 372 after the second pulse of a pulse pair is determined 
by the direction of rotation of magnet rotor 202. 

10 At a time after the pulse pair is encountered, the rising edge of the IRQ signal 

clocks the direction-indicating signal at the output of S-R flip-flop 372 into D-type flip-flop 
375. Thus, when a user rotates magnet rotor 202, the output of D-type flip-flop 375 is a 
constant binary signal which indicates the direction the user is turning the inner dial. 

During operation, the pulses produced by Wiegand sensor 370A cause an interrupt 

15 of CPU 380 on the falling edge of the IRQ signal from element 371 A. In servicing the 
interrupt, CPU 380 samples the DRXN signal which is stably registered in flip-flop 375 by 
the rising edge of the IRQ signal. In this manner, the CPU can determine whether to 
increment or decrement the number it causes to be displayed to the user on a display 312, 
described below. 

2 0 Also illustrated in FIG. 3B are various signals and levels which are generated on 

FIG. 3A. For example, the analog voltage levels, BOLTJVDD, UNBOLT_VDD and 
CMPNT_VDD are input to respective analog-to-digital converters within the CPU. The 
signal VDD and ground provide reference levels for the conversion to digital signals. 
Also, the VJSENSE binary signal is sampled directly by the CPU. 
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Switches 203A, 203B are schematically illustrated as respective two-position 
switches which may be connected either to VDD or to ground. Switch 203A senses 
whether inner dial 102 (FIG. 1) has been pushed, and switch 203B senses whether the bolt 
215 (FIG. 2) has been withdrawn. Further switches (not shown) may be provided in a 
similar configuration to perform other functions. For example, it may be desirable to allow 
a user to request a change of combination, a request which should be recognized only when 
the bolt is retracted. This functionality is readily built into the CPU software. 

The RESET_CPU signal is shown connected to the active-low reset input of the 

CPU. 

Also, a suitable timing source, such as a crystal oscillator 381, is illustrated. 

The CPU 380 also outputs two pairs of binary signals which govern the position of 
electronic switches 396, 397, 398, 399, Switches 396 and 397 are connected in series 
between V_UNLOCK and ground. Switches 398, 399 are connected in series between 
V_LOCK and ground. The motor 201 (FIG. 2) is connected between the respective 
intermediate nodes between switches 396 and 397, and between switches 398 and 399. 

In operation, when the CPU determines that the motor is to turn motor cam 205 in 
a direction to allow the bolt to unlock, then switches 396 and 399 are turned on, so that 
current passes from V_UNLOCK through switch 396, the motor 201, and switch 399 to 
ground. The motor turns the motor cam into a position shown in FIG. 5A. 

Conversely, when the CPU determines that the motor should turn motor cam 205 
to prevent the user from withdrawing the bolt, then it causes switches 397 and 398 to close, 
so that current passes from VJLOCK through switch 398, motor 201, and switch 397 to 
ground. The motor turns the motor cam into a position shown in FIG. 5B. 
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Of course, when the CPU determines that the motor should be inactive, all switches 
396, 397, 398, 399 are left open, and no power is consumed by the motor. 

CPU 380 governs a display element 312. The illustrated display element includes 
two LCD numeric displays 312, and an arrow element 312A. CPU 380 passes data to a 
5 shift register 314 associated with the displays using data and clock signals in a manner 
easily appreciated by those skilled in the art. The bits are decoded by logic within the 
display element, so as to provide a visual display of numerals to the operator. 

In an exemplary embodiment, which should in no way limit the scope of the 
invention as defined in the claims, the following particular implementations of various 

10 elements may be chosen. The total capacitance of elements C322 and C332 may be the 
same. However, because capacitor bank C342 powers all the electronic components, its 
capacitance should be approximately four times that of the C322 and C332 capacitor banks. 
Of course, the particular implementation of the electronics would determine an optimum 
design for the capacitor banks. Overvoltage and undervoltage detectors 350, 353 may be 

15 implemented using an ICL 7665SIBA. Voltage regulator 356 may be implemented as an 
ICL 7663SIBA, and produce a 3.1 volt output for the electronics from an approximately 
16 volt unregulated input. Suitable by-pass capacitors may extend between VDD and 
ground, as deemed necessary. Flip-flops 372, 375 may be implemented as part of a single 
4013 integrated circuit package. CPU 380 may be implemented as a 68HC805B6, available 

2 0 from, Motorola, Inc. The reference voltage of Zener diode D312 may be 16 volts, and 
correspond to the maximum capacitance of the capacitors in the capacitor banks C322, 
C332 and C342. The full wave rectifiers 304A-D may be of conventional design, with the 
time-domain summation elements 305 simply being a wire connection between the outputs 
of the full wave rectifiers. The shift register 314 may be implemented in any suitable 
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serial-in-parallel-out shift register. Of course, variations and substitutions of these 
elements, and of the magnitude and nature of the electrical quantities which they produce, 
lie well within the capability of those skilled in the art 

Briefly, the electronic combination lock of FIGS. 1-5B functions as follows. 
5 At startup, the CPU monitors UNBOLT_VDD and VJSENSE (and also 

BOLTJVDD if desired) to determine when it is appropriate to begin an operational 
scenario. In practice, immediately after startup, the CPU does not begin its main operation 
until it senses that UNBOLT_VDD is large enough, and VJSENSE is activated. After 
sufficient power has been generated and stored in capacitor bank 330, the electronic 
10 combination lock may operate fully. A similar monitoring may be performed on 
BOLT.VDD. 

In a particular preferred embodiment, the display is turned on only after sufficient 
power has been generated and stored, by operation of the outer dial. In this embodiment, 
the activation of the display indicates to the user that he does not need to turn the outer dial 
15 any more. 

As the inner dial is turned, the dial position is encoded through use of the magnet 
rotor 202 and the Wiegand effect sensors 370A, 370B. CPU 380 recognizes the signals 
derived from the pulses generated in response to Wiegand elements, and the CPU causes 
the position indicator LCDs 312 to indicate increasing or decreasing numerical values. 
20 When the inner dial is pushed (presumably to indicate the user believes the 

displayed number is one number in the numerical combination), sensor switch 203A is 
closed, thus informing CPU 380. CPU 380 reads the change of state of the switch 203A 
and accepts the displayed number as part of the believed combination, storing the number 
internally. This process of entering successive numbers of the combination is repeated for 
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successive numbers of the believed combination. Then, the following occurs in the 
mechanical elements. 

However, when a correct combination is input through operation of inner dial 102, 
the lock may be put into its unlocked position in the following manner. The electronic 
5 circuitry recognizes the sequential entry of combination numbers through repeated pushing 
of inner dial 102. The CPU 380 causes application of electrical current to bolt motor 201 
so as to rotate motor cam 205. The motor cam 205 rotates within cove 213C on the 
locking lever 213 to allow the locking lever to rotate counter-clockwise (in FIGS. 2 and 
5A) under the urging of spring 212. As the locking lever 213 rotates counter-clockwise, 

10 the key 213K engages a notch in the drive cam. Then, as the user rotates inner dial 102 
clockwise (which translates to counter-clockwise motion as viewed in FIG. 2), the bolt is 
retracted as locking lever 213 pulls bolt 215 into the case 214. 

To lock the mechanism after it has been unlocked, the following occurs. The inner 
dial is turned counter-clockwise in FIG. 1, which corresponds to clockwise motion in 

15 FIG. 2. Because the key 213K (FIG. 5) is mated with the slot 218SL in drive cam 218 
(FIG. 4), the bolt 215 is moved toward its locked (extended) position. As the inner dial 
is turned further, the key 213K is pushed out of the drive cam's slot 218SL because of the 
rounded shape of the key 213K. After the locking lever is disengaged from the drive cam, 
a tab 218T (FIG. 4) on the side of the drive cam engages the link key 211K (FIG. 2). 

2 0 Continued rotation of the inner dial causes continued motion of the sliding link 211 to 
engage the motor cam 205 and cause it to rotate clockwise. As it rotates clockwise, motor 
cam 205 raises locking lever 213 so that the key 213K can no longer engage the slot 
218SL in drive cam 218. Thus, in order for the inner dial (and the drive cam) to move the 
bolt into the case again, the correct combination must again be dialed. 



WO 95/12047 



PCT/US94/12498 



- 24 - 

When the bolt 215 is extended in its lock position, it cannot move back into the 
lock case 214, because of the position of the locking lever 213. This is because the motor 
cam 205 rotates the locking lever clockwise (as viewed in FIGS. 2 and 5B) into a position 
to hold it away from the slot 218SL in the drive cam 218, and against a stop surface 214SS 
5 in the case. If force is applied directly to the bolt 215 to attempt to force it into the case 
214, motion of the lever 213 and bolt 215 is prevented by virtue of the position of stop 
surface 214SS. 

It will be appreciated by those skilled in the art that the charge stored in 
V_UNLOCK is used up very quickly by the motor in moving the motor cam after a correct 

10 combination entry. In contrast to VJJNLOCK, V_DCSUPP normally lasts much longer 
than needed to allow the user to withdraw the bolt. When a sufficient length of time has 
not passed between successive locking openings, the voltage supplying power to the 
electronic components, VJDCSUPP, is still at a high enough level to allow the lock to 
operate. However, in this situation, there would not be a sufficient charge in VJJNLOCK. 

15 For this reason, a separate sensing signal is used to monitor the magnitude of V_DCSUPP 
and VJQNLOCK to ensure proper startup operation. 

This monitoring feature is supplemented by a "timeout" feature, as follows. 
According to a preferred embodiment, after the CPU causes the bolt motor 201 to 
rotate the locking lever 213 counter-clockwise to engage the drive cam 218, an "opening 

20 time window", preferably about 20 seconds, is created in the software. During this 
window, the bolt must be retracted by turning the inner dial. If the inner dial is not 
properly turned in the manner required to open the lock, the window ends, the motor 
rotates the motor cam 205 to rotate locking lever 213, and the correct combination must 
again be dialed to retract the bolt. 
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To achieve this "timeout" feature, the electrical interlock switch 203B senses if the 
lock bolt 215 has been drawn within the case 214 a sufficient distance. If the lock bolt 215 
has not been retracted, the switch will not have changed the state within the time window. 
Accordingly, the CPU reverses motor's direction and turns the motor cam 205 so as to 
5 move the locking lever away from the drive cam. In this position, the locking lever is 
rotated clockwise as seen in FIG. 2, and it cannot engage the drive cam 218 until a correct 
combination is entered. 

FIG. 4 illustrates drive cam 218 in more detail, with its slot 218SL and tab 218T. 
Slot 218SL is provided for engagement with key 213K on locking lever 213. Tab 218T 
10 is provided for engagement with sliding link key 2 1 IK. The purpose and function of these 
elements in the electronic combination lock are described above. 

FIG. 5 (not in exact proportion to FIG. 4) illustrates the portions of locking lever 
213 in more detail, including the following: slot 213SL for receiving sliding link 211; key 
213K for engaging drive cam 218; cove 213C in which bolt motor drive cam 205 operates; 
15 and pivot hole 213H about which the locking lever rotates, and into which fits lever screw 
224 which is threaded into a corresponding hole in bolt 215. 

FIGS. 5A and 5B illustrate the relative position of the locking lever 213 and motor 
cam 205 in the unlock (engage) position and lock (disengage) positions, respectively, as 
referred to repeatedly above. 
2 0 Referring now to FIG. 6, a flow chart of the operation of the electronic combination 

lock is illustrated. For purposes of clarity, the flow charts in this specification omit 
incidental and bookkeeping tasks which are understood by those skilled in the art to be 
present and necessary. For example, index (counting) variables are not explicitly shown 
to be initialized or incremented, because a specific illustration and description of such 
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initialization are not required for description of the invention and are not necessary for 
those skilled in the art to make and use the invention. Those skilled in the art are readily 
capable of properly initializing and incrementing index variables, without undue 
experimentation. 

5 The method illustrated in FIG. 6 may be implemented in software or firmware in 

CPU 380 (FIG. 3). Preferably, the software or firmware is embedded in a read only 
memory (ROM) within the CPU. The ROM is connected to the processor in the CPU by 
suitable address, data, and control buses as readily appreciated by those skilled in the art, 
and found in commercially available CPUs. Because the detailed implementation of the 

1 0 internal structure of the CPU is not essential to the invention that is being claimed, and 
because this structure is readily capable of implementation or commercial purchase by those 
skilled in the art, it is not further discussed here. 

Referring to FIG. 6, the user spins outer dial 101 (FIG. 1) so as to provide power 
to the electronic components. This procedure, indicated in block 600, is carried out using 

15 the circuitry shown in FIG. 3 A. 

Thereafter, as indicated at block 602, the CPU causes display element 312 to display 
an index number representing the number of times that the lock has previously been 
opened. This feature advantageously informs the user of any unauthorized openings of the 
lock. For example, if, on a Friday afternoon, a bank officer opened the lock and saw a 

2 0 "47" displayed, but then, on Monday morning, opened the lock to find a "49" displayed 
(instead of the "48" he would expect), he would know that over the weekend another 
individual had opened the lock. 

After these preliminary steps 600 and 602, control passes to a loop whose first 
functional block is block 610. 
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In block 610, the CPU monitors the movement of the inner dial. This is done by 
receiving signals from pulse shaper 371 A and flip-flop 375 (FIG. 3B), as described above. 

In response to the monitored movement and position of the inner dial, the CPU 
changes the display 312 to provide visual feedback to the operator that his rotation of the 
5 inner dial is being recognized. This ongoing change of display is reflected at block 612. 

Decision block 614 causes control to branch, based on whether or not the inner dial 
has been pushed by the operator. This is sensed by the sensor switch 203A (FIG. 3). If 
the inner dial has not been pushed, control returns to block 610 for continued monitoring 
of the position and movement of the inner dial. However, if the CPU detects closure of 
10 dial switch 203A, control passes to block 616. 

At block 616, the CPU recognizes the present number output to display element 312 
as being a number which the operator believes is part of the combination. The CPU stores 
this number in RAM for comparison with the programmed combination of the particular 
combination lock which has previously been stored in a non-volatile memory. 
15 Control then passes to decision block 620. At decision block 620, the CPU decides 

whether the total number of times that the dial has been pressed, is the same as the quantity 
of numbers that are in the combination. Usually, there are three numbers in the 
combination. 

If less than the total quantity of numbers in the combination have been entered, 
20 control passes to block 622. At block 622, the CPU causes display element 312 to 
immediately display another number, which in the preferred embodiment is different from 
the number selected by the operator. Then, control passes back to block 612, in which the 
CPU monitors the position and movement of the inner dial. 
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More specifically, in block 622, the CPU may execute an algorithm which causes 
display of a different number. Essentially, the preferred algorithm is a non-random offset 
number display which is sufficiently different from the selected number to immediately 
hide the selected number from people spying on the operator. This feature also provides 
5 the advantage of defeating auto-dialers. 

Referring again to FIG. 6, if decision block 620 determines that three selections 
have been entered, control passes to decision block 624. At block 624, the CPU compares 
the numbers in the permissible combination or combinations to the series of selected 
numbers which the operator has entered. If the series of selected numbers do not match 
10 a proper combination, control passes to block 626. 

At block 626, the CPU blanks the number display and causes the display element 
3 12 A to display an arrow for a given period of time such as 20 seconds, as if a correct 
combination had been entered. However, from this time on, the CPU recognizes the lock 
as being in a "locked" state as indicated by lock 648. After 20 seconds, the entire display 
15 is blanked and the lock cannot be opened. 

If, however, decision block 624 determines that the series of selected numbers 
matches a combination, control passes to block 628. At this time, a 20-second timer is 
activated. The 20-second timer defines a 20-second time window which is used for. 
purposes described below. 
20 At this time, it is known that a correct combination has been entered. Therefore, 

block 630 reflects the CPU's activation of the motor (FIG. 3). CPU 380 causes motor 201 
(FIG. 2) to rotate motor cam 205 (FIGS. 2 and 5A) to allow the locking lever 213 to 
engage drive cam 218. Thereafter, control passes to block 632. 
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At block 632, the CPU causes the numerals to be blanked from display element 312, 
but displays an arrow 312A to be shown to the user. The arrow instructs the user to rotate 
the inner dial clockwise to mechanically open the lock. Then, control passes to decision 
block 634. 

5 At block 634, the CPU determines whether bolt withdrawal detection switch 203B 

has changed state, to indicate that bolt 215 (FIG. 2) has indeed been withdrawn. If the bolt 
has not yet been withdrawn, control passes to decision block 640. 

At decision block 640, the CPU determines whether or not the 20-second time 
period started in block 628 has expired. If the time period has not expired, control passes 
10 to block 632, repeating the loop in which the state of bolt withdrawal detection switch 
203B is sensed. When the bolt has been withdrawn into the case, control passes from 
decision block 634 to block 635. 

At this time, the index reflecting the number of times that the lock has been opened 
is incremented. This index number is stored for later use by block 602. This number is 
15 preferably stored in a non- volatile memory, such as an electrically erasable programmable 
read only memory (EEPROM) resident within the CPU, so that the number will be 
preserved over the substantial periods of time between the occasions on which the locked 
is opened. 

Immediately thereafter, the entire display is blanked at block 636, and the CPU 
2 0 recognizes the lock to be in the "unlocked" state, as indicated at block 638. 

Returning to discussion of decision block 640, if the 20-second time window has 
expired, control passes from decision block 640 to block 642. At block 642, the motor cam 
is rotated so as to rotate the locking lever 213 away from drive cam 218, as shown in 
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FIG, 5B. This prevents opening of the lock, even if the drive cam 218 is rotated. In order 
to open the lock, a correct combination must again be entered. 

After the locking lever is moved away from the drive cam, the display is blanked, 
as shown at block 644. The CPU recognizes the lock to be in the "locked" state, as 
5 indicated at block 648. 

In the preferred embodiment, if at any time during the procedure of FIG, 6, a period 
of 20 seconds elapses between consecutive steps, the CPU blanks the display, and the entire 
process must be started from block 600. This eventuality is not specifically displayed in 
FIG. 6, to keep FIG. 6 as clear as possible. Those skilled in the art will readily be able 
10 to implement this feature without undue experimentation, given the present description, 
especially that related to FIGS. 3A and 3B. Therefore, the particular software or firmware 
needed to accomplish it is not further discussed here. 

Referring now to FIG. 7, the "lockout" feature of the present invention is illustrated 
in flow chart form. 

15 Referring to FIG. 7, the decision block 624, the display block 626, and the 

LOCKED state block 648 are copied from FIG. 6. Inserted after block 626 are a counter 
increment block 700 and a decision block 710. 

At decision block 710, the CPU determines whether or not the number of successive 
incorrect combinations entered has grown to a certain number, for example, 5. If less than 

2 0 five incorrect combinations have been entered successively, control passes to block 648 in 
the same manner described with reference to FIG. 6. 

However, if the user has entered five successive incorrect combinations, the system 
enters the "lockout" state. Briefly, the lockout state provides that no one can open the lock, 
even with the "correct" three-number combination processed in FIG. 6. To open the lock 
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in the lockout state, a user must enter an "override" combination. In the preferred 
embodiment, the override combination has six numbers, as compared to three numbers 
discussed above in the combination processed in FIG. 6. 

Referring again to FIG. 7, as the lockout state is entered control passes to block 

720. 

At block 720, a "number of entries" parameter, which is used for comparison in 
block 620 (FIG. 6), is changed from 3 to 6. More generally, block 720 indicates a change 
in a "number of entries" parameter from the quantity of numbers in the "normal mode" 
combination to the quantity of numbers in the override combination. 

It is understood that block 720 can be implemented in a variety of ways. For 
example, an override combination may be chosen which is a mathematical variation of the 
normal mode combination. This choice of override combination facilitates the user's 
remembering the override combination, while reducing the number of separate 
combinations which must be stored in the non-volatile memory. 

After block 720, control passes to the top of FIG. 6. The system responds as in the 
mode described with reference to FIG. 6, except that the comparisons performed in blocks 
620 and 624 have been altered by FIG. 7 block 720. 

When a correct override combination has been entered, as recognized at block 624, 
the system exits the lockout mode and reenters normal mode. Control passes to block 740. 
Block 740 performs the reverse operation performed by block 720. Specifically, the 
"number of entries" parameter is changed back to 3. When the lock is later used, it will 
be in the normal mode upon power-up. 
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FIG. 8 illustrates several elements from FIG. 1. The elements in FIG. 8, which are 
not illustrated to the same scale as each other, demonstrate the tamper-resistant and tamper- 
evident features of a preferred embodiment 

Referring to FIG. 8, the bearing/retaining member 106 for inner dial 102 is 
5 illustrated. The bearing/retaining member 106 fits within the cylindrical portion in the 
center of dial ring 107. 

Similarly, a plurality of bearing/retaining members 105 are provided to bear and 
retain outer dial 101. 

In more detail, bearing/retaining member 106 is provided with three inner tabs offset 
10 from each other by 120°, only two tabs of which, 862, 864, are illustrated. Each inner tab 
is provided on a bendable tongue member, one of which is illustrated as element 866. As 
inner dial 102 is inserted within bearing/retaining member 106, tongue 866 yields outward 
to allow passage of the lower portion of inner dial 102. As inner dial 102 is fully inserted 
in member 106, tabs 862, 864 snap into a milled slot 820 provided about the circumference 
15 of the inserted portion of dial 102. In this manner, after inner dial 102 is inserted in its 
bearing/retaining member 106, it cannot be removed, because of the locking action of 862, 
864 and slot 820. 

Also illustrated in FIG. 8 is one of the three outer tabs 860 which are provided on 
the outer face of bearing/retaining element 106. Tab 860 is provided on its own tongue, 
20 and yields as it is inserted into a hollow cylindrical portion of the dial ring 107. When the 
bearing/retaining member 106 is fully inserted in the dial ring 107, tab 860 fits within an 
annular slot 868 in dial ring 107. In this manner, bearing/retaining member 106 cannot be 
removed from dial ring 107 without leaving physical evidence of its removal. 
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The three tabs such as element 860 are offset 60° from tabs such as elements 862, 
864. Thus, bearing/retaining element 106 is provided with six yielding tongues of two 
types which are arranged in an alternating pattern about the circumference. 

Outer dial 101 is retained in the following manner. Bearing/retaining member 105, 
5 an exemplary one of three such members shown in FIG. 1, is provided with a tongue 856 
at whose extremity is provided a hooked structure 850. As the outer dial 101 is lowered 
into place, the tongue 856 yields until hook structure 850 engages an annular slot 810 on 
the circumference of the outer dial. The outer dial is thus snapped in place, and may rotate 
freely with hook members 850 from the plurality of bearing/retaining elements 105 staying 
10 within annular slot 810. 

Bearing/retaining member 105 is provided with a bearing surface 852 which 
supports a ring-shaped surface 814 on the bottom face of the outer dial. Also, 
bearing/retaining structure 105 is provided with a slightly concave surface 854 which 
matches the convex circumferential surface 812 on the outer dial, above slot 810. In this 
15 arrangement, bearing/retaining members such as element 105 secure the outer dial in place 
as it rotates. 

Outer dial 101 is provided with a hole 818 through which the knob portion of inner 
dial 102 may fit. A ring-shaped surface 816 on the bottom part of the edge of hole 818 
abuts a corresponding ring-shaped surface 822 on the top face of inner dial 102. The radial 
20 extent of surface 822 is greater than that of hole 818, so that the inner dial 102 cannot be 
removed without either destroying or removing outer dial 101. 

During assembly, members 105 and 106 are fixed to the dial ring 107. Then, inner 
dial 102 is snapped in place. Finally, outer dial 101 is snapped in place. 
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Using this arrangement, neither the outer dial 101 nor the inner dial 102 can be 
removed without obvious evidence of physical damage- Inner dial 102, which provides the 
more sophisticated function of selecting combination numbers, is still further protected, not 
only by a tab-slot arrangement, but also by the fact that it is secured by the outer dial 101 
5 itself. 

Various advantages accrue, from employing the present invention. The listed 
advantages specifically listed herein of course do not limit the scope of the invention as 
defined by the accompanying claims. 

An advantage of the present invention is its ability to allow the user to enter 

10 combination numbers by pressing inner dial 102. Between entry of combination numbers, 
the user may turn the dial in either direction. Depending on the software design chosen, 
the dial may be rotated any given number of times before the next combination number is 
entered. The software can be written to limit how many times the dial is rotated before a 
next number is recognized as being properly entered. The software may, for example, 

15 refuse to recognize a number entered after the dial has been rotated in one direction past 
the correct number more than once. 

Another advantage of the present invention is its use of a passive magnetic sensor 
to sense both the position and direction of the inner dial. The passive magnetic sensors, 
in the form of Wiegand elements placed close to the magnetic rotor, allow the CPU to 

2 0 count the revolutions of the dial. This arrangement is simple, yet very reliable, because the 
direct measurements of position do not require any power. In any event, recognition of the 
operator's selection of a number is based on the CPU's displayed number, and is not based 
directly on any sensed position of the magnet rotor, thus eliminating false inputs. 
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Further, the invention's bolt is directly withdrawn and extended through use of 
mechanical elements, not requiring electrical power or complex and failure-prone gears 
which are common in the art. 

Moreover, the invention's use of a time-out period, such as 20 seconds, to govern 
various operations as described above, provides additional features of security. 

Also, the use of a dual dial, one to generate electricity, and the other to select and 
enter combination numbers, are not found in known systems. 

Of course, the novelty and non-obviousness of the present invention need not be 
limited to those features exclusively described herein. Further, modifications and variations 
of the above-described embodiments of the present invention are possible, as appreciated 
by those skilled in the art in light of the above teachings. For example, different electrical 
components, different arrangements thereof, and different implementations of the described 
processes, may be effected by those skilled in the art without varying from the scope of the 
invention. It is therefore to be understood that, within the scope of the appended claims 
and their equivalents, the invention may be practiced otherwise than as specifically 
described. 
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WHAT IS CLAIMED IS : 

1. An arrangement of controls on a combination lock, the arrangement 
comprising: 

means for recognizing a combination and for allowing opening of the lock, 
when power is provided; 
5 means for storing and providing power to the recognizing means; 

a first control structure, accessible from outside the lock, which is movable 
by a user to provide power to the storing means; and 

a second control structure, accessible from outside the lock, which is 
movable by the user separately from the first control structure to determine the 
10 combination. 

2. The arrangement of claim 1, wherein: 

the first control structure and the second control structure are co-axial dials. 

3. The arrangement of claim 2, wherein: 

the first and second control structures rotate about a substantially common 
axis of rotation. 

The arrangement of claim 3, wherein: 

the first control structure is a rotatable ring dial having a space in its center 



4. 



portion; 
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the second control structure is a dial which fits in the space in the first 

structure; and 

the first control structure and the second control structure are separately and 
independently rotatable. 

5. The arrangement of claim 1, wherein the recognizing means includes a 
microprocessor which includes: 

means for receiving signals derived from the second control structure; and 
means for controlling a display of a portion of a combination in response to 
the signals derived from the second control structure. 

6. The arrangement of claim 1, wherein: 

the arrangement further comprises at least one generator controlled by 
motion of the first control structure; 

the storing means includes at least one capacitor for storing electric charge 
generated from current produced by the at least one generator: and 

the recognizing means is powered by the stored charge. 



7. An arrangement for bearing and retaining at least one externally accessible 
rotatable dial on a combination lock, the arrangement comprising: 
a support structure; 
the rotatable dial; and 
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an integral bearing/retaining member, affixed to a first one of the support 
structure or dial, the member including a clip which matingly engages a slot in a second 
of the support structure or dial so that the clip cannot be removed from its mating 
engagement with the slot without causing visible damage. 

8. The arrangement of claim 7, wherein the bearing/ retaining member's clip 
is in the form of a leaf spring which exerts pressure away from the bearing/retaining 
member against the slot so as to secure the bearing/retaining member within the slot 

9. The arrangement of claim 8, wherein the slot has a ridge which matingly 
engages the clip so as to secure the clip within the slot 

10. An arrangement within a lock, comprising: 
a motor; 

a motor cam, directly responsive to turning of the motor; 
a bolt, extendable out of and withdrawable into the lock; and 
a locking lever, operatively connected to the bolt, directly contacted by the 
motor cam, and directly responsive to the motor cam so as to be moved into and out of an 
"engage" position in which the bolt may be extended or withdrawn from the lock. 

11. The arrangement of claim 10, further comprising: 

an externally accessible dial for manipulation by a user; and 
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a drive cam, directly responsive to motion of the dial, against which the 
locking lever may be engaged or disengaged in direct response to the motion of the motor 
cam, so that the user may mechanically withdraw the bolt when the locking lever is in the 
engage position. 

12. An arrangement within a lock, comprising: 

a) a bolt capable of being extended from or withdrawn into the lock; 

b) means for entering an input combination; and 

c) control means including: 

1) means for comparing the input combination with at least one 
correct combination and for determining a match therebetween; 

2) means for forming a time window after the match is 
determined; and 

3) means for enabling the bolt to be withdrawn only during the 

time window. 

13. The arrangement of claim 12, wherein the enabling means includes: 
means for moving a locking lever between "engage" and "disengage" 

positions with respect to a bolt withdrawal mechanism. 

14. The arrangement of claim 13, wherein the control means includes: 

a microprocessor, responsive to coded instructions, for monitoring the time 
window and for activating a motor to which the locking lever is responsive in moving 
between its engage and disengage positions. 
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15. The arrangement of claim 14, further comprising: 

a motor cam, directly linked to and integrally moving with rotation of the 
motor, the motor cam directly engaging the locking lever to move the locking lever 
between its engage and disengage positions. 

16. A self-powered lock, comprising: 

a) a bolt capable of being extended from and withdrawn into the lock; 

b) means, responsive to entry of a correct combination, for enabling the 
bolt to be withdrawn into the lock, the enabling means having: 

5 1) an "engage" position in which the bolt can be withdrawn into 

the lock; and 

2) a "disengage" position in which the bolt cannot be withdrawn 

into the lock; 

c) means within the lock for storing energy for operation of certain 
10 components the lock; 

d) means for monitoring an energy level of the storing means; and 

e) means, responsive to the monitoring means, for preventing the 
enabling means from moving from its "disengage" position to its "engage" position if the 
monitored energy level is below a given energy threshold; 

15 wherein the given energy threshold is greater than or equal to an amount of 

energy required to subsequently move the enabling means from its "engage" position to a 
"disengage" position after a predetermined time period. 
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17. The arrangement of claim 16, wherein: 

the enabling means includes a locking lever selectively positionable between 
the bolt and a mechanism for withdrawing the bolt; 

the locking lever's engage position is one in which the withdrawing 
5 mechanism and the bolt are connected; and 

the locking lever's disengage position is one in which the withdrawing 
mechanism and the bolt are not connected. 

18. The arrangement of claim 17, wherein the withdrawing mechanism includes: 
an externally accessible dial which is linked to the enabling means when the 

enabling means is in its engage position. 



19. A self-powered lock, comprising: 

a movable dial, accessible from outside the lock for a user to select an input 

combination; 

means for generating and storing energy; 
5 a magnetized element, moving in response to the dial's movement; 

Wiegand sensor means, operating based on the Wiegand Effect, placed with 
respect to the magnetized element for generating signals indicative of movement of the 
magnetized element; and 

control means, powered by the energy from the storing means, for 
10 interpreting the signals from the Wiegand sensor means and for controlling operation of the 
lock. 
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20. The lock of claim 19, wherein: 

the magnetized element is a magnet rotor which rotates in response to 
rotation of the dial, the magnet rotor having at least one pair of N-S poles; and 

the Wiegand sensor means is positioned with respect to the magnet rotor so 
as to sense a magnetic field from the at least one N-S pole. 

21. The lock of claim 20, wherein the control means includes: 

means for interpreting the signals from the Wiegand sensors and determining 
therefrom a direction of motion of the dial. 

22. A combination lock capable of operating in (1) a normal mode in which at 
least one first combination allows the lock to be opened and (2) a lockout mode in which 
at least one second combination allows the lock to be opened, wherein the at least one first 
combination differs from the at least one second combination, the lock comprising: 

means for receiving an input combination; 

means for comparing the input combination with the at least one first 

combination; 

means for counting a number of successively-entered incorrect input 
combinations which do not match a valid first combination; and 

means, responsive to the counting means when the counting means 
determines that a given threshold number of successively entered incorrect combinations 
have been encountered, for changing the operational mode of the lock into the override 
mode. 
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23. The combination lock of claim 22, wherein: 

the at least one first combination is shorter in length than the at least one 
second combination. 

24. The lock of claim 22, wherein: 

the comparing, counting, and changing means include a microprocessor 
executing instruction codes for comparing the input combination to the first and second 
combination(s); and 

the combination lock further comprises at least one substantially non-volatile 
memory device for storing combinations. 
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